This week we discuss the inevitable dilution in the value of code signing, a new worrisome cross-site privacy leakage, is Unix embedded in all our motherboards? The ongoing applica…

Risk Consulting provides security services, Crisis Management , Assist management, Threat and Vulnerability Assessments.

Socks proxy server using powershell. Supports local and reverse connections for pivoting. - p3nt4/Invoke-SocksProxy

A Cisco Security Response alerts about possible abuse of the Smart Install feature. While not considered a vulnerability, the Response provides guidance on how to protect their networks against abuse.

Millions of people who hold a Netflix account are currently exposed to the latest email phishing scam that is telling users that their account is suspended due to a problem validating their credit cards. Beware – this is a scam. View Full Story ORIGINAL SOURCE:…

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation - elceef/dnstwist

Eyeing more secure alternatives to Social Security numbers, lawmakers in the U.S. are looking abroad. Today, the Senate Commerce Committee questioned former Yahoo CEO Marissa Mayer, Verizon Chief…

VestaCP allows for root privilege escalation from PHP leveraging Nginx configuration.

3 points and 0 comments so far on reddit

Continuing with the mini-series Top 10 Security Tips For Your Network number 2 is about patching. Equifax happened, ultimately, due to a lack of prompt patching. Updates to your network components and software fix bugs, improve performance but also close…

iMessagesBackdoor - A noscript to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.

We uncovered new Android malware that can surreptitiously install other malware on the affected device via the Toast Overlay attack: TOASTAMIGO.

Hello Hunters,                         This time I am writing about a Vulnerability found in another private program(xyz.com) on Bugcrowd ...

1 points and 0 comments so far on reddit

OReilly Security Conference 2017 - New York, NY MP4 | Video: AVC 1920x1080 | Audio: AAC 48KHz 2ch | Duration: 2 Hours | 4.20 GB

BASELINE – SANS & Offensive-Security File size: 85 GB

This is a blog post summarising a few notes I’ve gathered around the internet, with the purpose of cementing them in my mind rather than adding anything new or attempting to broadcast them to…

by Mitja Kolsek, the 0patch Team In September 2017, Qihoo 360 Core Security detected an in-the-wild attack that leveraged an Office 0day ...

A blog about information security, hacking, and protecting digital infrastructure. Penetration testing, malware analysis, and intrusion detection.